The Agent Skills Directory

[PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to its requirement to analyze external data which could contain hidden malicious instructions.
Ingestion points: The skill explicitly instructs the agent to analyze user-provided keyword exports, call transcriptions, survey responses, and web search results from forums like Reddit and Quora.
Boundary markers: Instructions are missing for defining clear delimiters between the skill's system instructions and the untrusted data being analyzed, which could lead to the agent following instructions embedded in that data.
Capability inventory: The agent is required to read local project configuration files (e.g., .agents/product-marketing.md) and perform active web searching, providing a broad surface for processing varied external content.
Sanitization: There are no instructions for the agent to sanitize, escape, or validate external content before processing it for content strategy purposes.

content-strategy